{"id":"CVE-2023-1091","state":"PUBLISHED","title":"SQL Injection found in ALPATA's Licensed Warehousing Automation System","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.\n\nThis issue affects Licensed Warehousing Automation System: through 2023.1.01.","publishedAt":"2023-03-10T07:02:09.307Z","updatedAt":"2026-06-01T11:45:43.839Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["Alpata Licensed Warehousing Automation System"],"affected":[{"vendor":"Alpata","product":"Licensed Warehousing Automation System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2023.1.01","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-23-0139","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0139"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/1xxx/CVE-2023-1091.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-1091","state":"PUBLISHED","datePublished":"2023-03-10T07:02:09.307Z","dateUpdated":"2026-06-01T11:45:43.839Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2023-02-28T14:07:00.592Z"},"containers":{"cna":{"title":"SQL Injection found in ALPATA's Licensed Warehousing Automation System","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.\n\nThis issue affects Licensed Warehousing Automation System: through 2023.1.01."}],"affected":[{"vendor":"Alpata","product":"Licensed Warehousing Automation System","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2023.1.01","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-23-0139","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0139","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-01T11:45:43.839Z"},"datePublic":"2023-03-10T06:15:00.000Z","impacts":[{"capecId":"CAPEC-108","descriptions":[{"lang":"en","value":"CAPEC-108 Command Line Execution through SQL Injection"}]}],"credits":[{"lang":"en","value":"Resul Melih MACIT","user":"00000000-0000-4000-9000-000000000000","type":"finder"}],"source":{"defect":["TR-23-0139"],"advisory":"TR-23-0139","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.usom.gov.tr/bildirim/tr-23-0139","tags":["government-resource","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T05:32:46.379Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-27T21:03:34.644496Z","id":"CVE-2023-1091","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-27T21:03:43.201Z"}}]}}}